Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/kidbei/easy-tunnel
cd client && go build
cd server && go build
./server -h
-host string 服务器通信ip (default "0.0.0.0")
-port int 通信端口 (default 9960)
./client -h
-bh string 开启映射后绑定ip (default "0.0.0.0")
-bp int 远程开启的映射端口,必填 (default -1)
-fh string 转发目标ip (default "127.0.0.1")
-fp int 转发目标端口,必填 (default -1)
-h string 远程服务器通信ip (default "127.0.0.1")
-p int 远程服务器通信端口 (default 9960)
比如我们有公网服务器10.11.11.14,现在我本地开启了一个8080的http服务,希望访问10.11.11.14:9999能访问到本地的8080服务。
./server -host 0.0.0.0 -port 9960
./client -h 10.11.11.14 -p 9960 -bh 0.0.0.0 -bp 9999 -fh 127.0.0.1 -fp 8080
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.